diff --git a/patches/systemvm/debian/config/root/firewall.sh b/patches/systemvm/debian/config/root/firewall.sh
index b548ec649a0..84cbab75d5f 100755
--- a/patches/systemvm/debian/config/root/firewall.sh
+++ b/patches/systemvm/debian/config/root/firewall.sh
@@ -47,7 +47,7 @@ ip_to_dev() {
 tcp_or_udp_entry() {
   local instIp=$1
   local dport0=$2
-  local dport=$2
+  local dport=$(echo $2 | sed 's/:/-/')
   local publicIp=$3
   local port=$4
   local op=$5